2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-31 14:35:26 +00:00

Diffie Hellman keys shouldn't even think about creating SIG records

This commit is contained in:
Brian Wellington
1999-09-30 02:50:54 +00:00
parent 9b9a2770b1
commit 4c59b4ad1a

View File

@@ -16,7 +16,7 @@
*/
/*
* $Id: dnssec.c,v 1.6 1999/09/23 20:56:59 bwelling Exp $
* $Id: dnssec.c,v 1.7 1999/09/30 02:50:54 bwelling Exp $
* Principal Author: Brian Wellington
*/
@@ -280,6 +280,11 @@ dns_dnssec_sign(dns_name_t *name, dns_rdataset_t *set, dst_key_t *key,
sig.timeexpire = *expire;
sig.keyid = dst_key_id(key);
sig.siglen = dst_sig_size(key);
if (sig.siglen < 0) {
/* close enough for now */
return (DNS_R_KEYUNAUTHORIZED);
goto cleanup_signer;
}
sig.signature = isc_mem_get(mctx, sig.siglen);
if (sig.signature == NULL)
goto cleanup_name;